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5 CROSS REFERENCE TO RELATED APPLICATIONS 

This application claims priority to, and the benefit of, U.S. Provisional Application 
No. 60/271,457, entitled "System and Method for Securing Data through a PDA Portal" 
filed on February 26, 2001 and U.S. Patent Application Serial No. 09/836,213, entitled 
"System and Method for Networked Loyalty Program", filed on April 17, 2001, which 
10 itself claims priority to U.S. Provisional Application Serial No. 60/279,817, entitled 
"System and Method for Networked Incentive Awards Program" filed March 29, 2001 , all 
of which are hereby incorporated by reference in their entirety. 

5 FIELD OF THE INVENTION 

CO The present invention relates generally to a personal digital assistant (PDA) 

ti 15 portal, and more specifically, to a PDA portal which facilitates securing content while it is 
4» collected, assembled and delivered to the PDA device from the source to viewing by the 

user. 



01 

o 



BACKGROUND 

Incentive award programs have been developed in a variety of industries to 
fy 20 promote customer loyalty. Generally, such programs reward customers for repeat 
business with the same merchant or service provider by accumulating reward points 
which can then be redeemed in a plurality of ways, including exchanging the reward 
points for additional goods and services that may be selected from an approved list or a 
redemption catalog for example. The reward points are usually calculated using a 
25 predetermined formula or ratio that relates a customer's purchase volume {i.e., in terms 
of money value or some other volume parameter) to a certain number of reward points. 
For example, reward points may be issued on a one-for-one basis with each dollar that 
a customer spends on particular goods and services. 

One well-known example of a customer incentive program is a "frequent flyer" 
30 program which rewards airlines passengers with "mileage points" based upon the 
distances that the passengers fly with a particular airline. The mileage points may then 
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be redeemed for free airfare or free car rentals. Other incentive award programs are 
designed to induce usage of particular financial instruments, such as credit cards or 
debit cards, by accumulating reward points or dollar value points based upon the 
volume of purchases made using the particular financial instrument. These types of 
programs may be designed such that customers of the financial institution accumulate 
reward points which can be redeemed for selected goods or services or, alternatively, 
such that customers accumulate points which have a dollar value which can be applied 
toward a credit or debit balance, depending on whether the instrument is a credit or 
debit instrument, for example. 

These and other similar incentive award programs are described in U.S. Patent 
Nos. 5,774,870 and 6,009,412, issued to Thomas W. Storey and assigned to 
Netcentives, Inc., both of which are hereby incorporated by reference to the extent that 
they describe an automated rewards system. For more information on loyalty systems, 
transaction systems, electronic commerce systems, and digital wallet systems, see, for 
example, the Shop AMEX™ system as disclosed in Serial No. 60/230,190 filed 
September 5, 2000; the MR as Currency™ and Loyalty Rewards Systems as disclosed 
in Serial No. 60/197,296 filed on April 14, 2000. Serial No. 60/200,492 filed April 28, 
2000, and Serial No. 60/201,114 filed May 2, 2000; a digital wallet system as disclosed 
in U.S. Serial No. 09/652,899 filed August 31, 2000; a stored value card as disclosed in 
Serial No. 09/241,188 filed on February 1, 1999; a system for facilitating transactions 
using secondary transaction numbers as disclosed in Serial No. 09/800,461 filed on 
March 7, 2001; and also in related provisional applications Serial No. 60/187,620 filed 
March 7, 2000, Serial No. 60/200,625 filed April 28, 2000, and Serial No. 60/213,323 
filed May 22, 2000, all of which are herein incorporated by reference. Other examples 
of online membership reward systems are disclosed in U.S. Patent No. 5,774,870, 
issued on June 30, 1998, and U.S. Patent No. 6,009,412, issued on December 29, 
1999, both of which are hereby incorporated by reference. A further example of a 
loyalty and reward program may be found at the AIR MILES® Web site 
(www.airmiles.ca), which describes a loyalty program offered by The Loyalty Group, a 
privately held division of Alliance Data Systems of Dallas, Texas, and which is hereby 
incorporated by reference. Additional information relating to smart card and smart card 
reader payment technology is disclosed in Serial No. 60/232,040, filed on September 
12, 2000, and U.S. Patent Nos, 5,742,845; 5,898,838 and 5,905,908, owned by 
Datascape; ail of which are hereby incorporated by reference. Information on point-of- 
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sale systems and the exploitation of point-of-sale data is disclosed in U.S. Patent No. 
5,832,457, issued on November 3, 1998 to O'Brien et a!., wliich is hereby incorporated 
by reference. 

Portions of each of the above-described programs may be used to induce 
5 customer loyalty to particular merchants or service providers who directly provide goods 
or services to the consumer. In other words, these prior art frequency awards programs 
provide a means for retail businesses, financial institutions, and others in direct contact 
with the customers they service to provide incentives to their customers to encourage 
repeat and/or volume business. However, these programs do not sufficiently address 
10 the similar needs of businesses that are further up in the distribution chain, such as 
manufacturers, to promote volume purchases by customers based upon, for example, 
brand loyalty independent of the retail source for the purchase. Additionally, the prior art 
programs do not provide a means for monitoring, tracking, and/or analyzing consumer 
h and product data across distribution channels for a particular manufacturer and/or the 

2 15 variety of goods which that manufacturer places into the stream of commerce for 
J= ultimate sale to consumers by a retailer. 

=P Generally, before a product arrives at a retail establishment for sale to a 

T consumer, the product travels through a distribution chain which originates with the 

5 manufacturer. The manufacturer typically sells its products to a wholesaler who in turn 

j| 20 sells those products to various retailers. Most modern retailers implement some form of 
2 computerization or electronic technology in their day-to-day operations. This technology 

m typically consists of using point-of-sale (POS) systems for automating checkout 

procedures, assisting sales personnel, and the like. POS systems generally include one 
or more automated check-out terminals which are capable of inputting or sensing and 
25 interpreting a symbol or other indicia related to the product, such as a Universal Product 
Code (UPC), generally comprising a machine-readable bar code coupled with a human- 
readable UPC number, that is printed on a label or tag which is placed on each item of 
merchandise to be purchased. The manufacturer may assign and mark each product 
that it sells with a UPC. Conventionally, once the product reaches the retailer, the 
30 retailer further identifies each product with a Stock Keeping Unit (SKU) number or code 
as well as other information for identifying a specific item or style of merchandise. The 
retailer's SKU number may be either an entirely different number used to identify each 
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product (e.g., by style) or a modified version of the manufacturer's UPC number, 
derived, perhaps, by adding a SKU number to the UPC number for example. 

A POS terminal, a kiosk terminal, or a sales person's hand-held terminal might be 
coupled to a store computer system, such as a network server or some other store 
platform host, which is able to recognize and process UPC and/or SKU information 
which has been manually keyed-in or sensed and interpreted by a device, such as a 
barcode reader, coupled to the terminal. The computer system typically includes a 
database which stores information relating to the retailer's product inventory, such as 
stocked merchandise, a UPC and/or SKU number for each Item of merchandise, and 
various types of merchandise identification information, such as price, inventory, style, 
color, size, etc., which is associated with each UPC and/or SKU number. When a 
customer purchases an item of merchandise, store personnel frequently use an 
automated terminal to read the barcode markings which are attached to the item. A 
computer interprets the UPC and/or SKU number comprised by the barcode, accesses 
the database to determine the price for each item, and maintains a running total of the 
total transaction price. 

One problem that results from the independent identification schemes of the 
manufacturer and the retailers is that there is no way for the manufacturer to track the 
quantity of any particular product that each retailer sold. For example, even if a 
manufacturer obtains all of the SKU numbers representing items purchased from 
Retailer 1 and Retailer 2 by consumers, the manufacturer has no means for determining 
which SKU number corresponds to the manufacturer's UPC, since the UPC's and SKU 
numbers of the various retailers are not tracked and matched. 

In view of the foregoing, a need exists for an incentive or loyalty program which 
overcomes the shortcomings of the prior art. Thus, there is a need for a system and 
method which provides a universal customer incentive program that networks various 
levels of the product distribution chain, such as manufacturers, wholesalers, and 
retailers, to provide incentives to consumers to purchase products not only from a 
particular merchant or group of merchants but also from particular manufacturers, 
regardless of the specific merchant who sells the manufacturer's products to the 
consumer. Additionally, a need exists for a system and method for gathering data which 
associates particular consumer purchasing behaviors and specific products or product 
criteria across a manufacturer's distribution channels. 
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Consumers may utilize computing devices to assist in the purcliase and/or loyalty 
process, and in particular, the consumer may utilize a PDA to facilitate the purchase 
and/or loyalty process. A PDA (personal digital assistant) includes any mobile hand- 
held device that provides computing, information storage and/or retrieval capabilities for 
5 personal or business use, often for keeping schedule calendars, note-entering and 
address book information. PDA products include, for example, the Hewlett-Packard's 
Palmtop and SCom's PalmPilot (www.palm.com), the details of which are hereby 
incorporated by reference. An increasing number of software and hardware applications 
have been written or developed for PDAs, including the combination of PDAs with 
10 telephones and paging systems. The PDAs were originally used in a disconnected 
fashion, functioning as a stand-alone personal computer, but the devices can now be 
connected to the internet for the purposes of browsing content. 

A PDA portal includes a method for collecting specific information of interest to a 
particular user and making it available for use on their device. The updating activity is 
typically executed when the device is connected to a network and "synchronized". 
Since there is a staggering amount of content available on the network, the user 
typically identifies which content they want refreshed each time. The PDA portal offers 
"channels" to the users that embody specific content available from various content 
providers, such as the Wall Street Journal, the New York Times, or MSN. Typically the 
20 content from these channels that is available for access is general, public information. 
In other words, very little content that is specific to an individual is available for access. 
O Although the general infomnation has value, it is minimal when compared to the 

^ opportunity for placing personal information on the user's PDA. Examples of personal 

content that may be desired is their monthly account statement, a travel itinerary, or an 
25 investment portfolio and its statement. This is information that could be of use to 
customers in the disconnected manner that is offered by PDAs. 

After a user has selected the content channels he wants to be placed onto his 
device, each time the user synchs his device, this content will be collected from the 
corresponding locations, assembled and placed onto the device. Since not all content 
30 will fit on a single page, the portal will typically interrogate the page looking for links to 
additional content pages. If present, additional content requests are made of the 
content source. Once collected, the content is assembled and stored on the connected 
PDA device. 
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Currently, the PDA portals do not offer secured personal content. If they do offer 
personal data, it is either not confidential (like addresses and directions) or available in a 
clear and unsecured state. A problem with using this method for secure content is that it 
is visible throughout the process. If the content includes account numbers, they may be 
exposed, and could be stolen and improperly used. The fundamental problem is often 
distributing personal content that must be secured into an unsecure environment. PDAs 
are inherently not secure. Being small and self-contained (to enable disconnected 
operation), they are easily lost or stolen, and downloading confidential content (such as 
account numbers or their balances) on the PDA that can be easily accessed by anyone 
other than the user is unacceptable. 

in a connected environment, the conventional wisdom is to use end to end 
security using the standard protocols (SSL) to secure the content between its source 
and its use. When its use is complete, the content is usually gone, as it is not stored on 
the PC. A disconnected environment is different in that the content is usually stored on 
the device for use when the device has been removed from the network. The definition 
of end to end security must therefore change to accommodate this difference, such that 
the content be secured once it leaves its source until the user has been properly 
authenticated on the device. 

Portals usually sen/e as a middle layer between the user and the content source. 
Traditional security measures work between the client and the source, but when a 
middle layer is added to the environment, there is a period when the content is exposed, 
when it is decrypted on the portal from the source and before it is encrypted for delivery 
to the users client. There is known security hardware that can be used for internet sites 
to insure the content is always secured. One of the difficulties of using this technology 
is that the portal still needs to be aware of the links that are present in the content to 
collect all the content of the channel. 

Since most of the content currently being placed onto these devices is general, 
the process being used to collect the content from the different channels and prepare it 
for the device does not need to be secure. But, since the content must be interrogated 
to determine any links that must be traversed to collect all the applicable data, the 
content is kept in an unsecured state at the PDA portal. Once the content has been 
prepared, it is moved to and placed onto the PDA as it is, unsecured. The process must 
therefore be amended to insure the content is secure in how it is collected, assembled 
and delivered to the PDA device. 
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SUMMARY 

Consumers may utilize computing devices to assist in tiie purciiase and/or loyalty 
process, and in particular, the consumer may utilize a PDA to facilitate ttie purctiase 
and/or loyalty process. During the purchase and/or loyalty process, the consumer may 
5 need to insure that any content downloaded or used in association with the PDA is 
secure in how it is collected, assembled and delivered to the PDA device. This system 
and method secures the data from its source to when it is actually viewed/used by the 
authorized user. The PDA may have direct access to an Internet web site portal that 
offers secure personal content from a content provider, such as, for example, an on-line 

10 banking or financial institution. Using the web site portal, the content provider may offer 
personal or confidential data, such as financial information, to PDA users in a secure 
(e.g.. encrypted) environment. The exemplary system and method may establish a PDA 
portal link to the web site for collecting specified information for a user and transmitting 
the information to the remote device. To receive the infomiation. the PDA contacts the 

15 portal and establishes a connection, authenticates itself to the network and allows the 
user to complete secured transactions or transmissions over the network. 

More particularly, the method for securing at least a portion of content from a 
source to a PDA includes, for example, synchronizing said PDA to a PDA portal; 
transmitting a signal to said PDA portal, wherein said signal represents content to be at 

20 least one of refreshed and downloaded to said PDA; providing identification signals from 
said PDA to said PDA portal, wherein said PDA portal is configured to interrogate 
sources containing said portion of said content to determine if secure content is included 
in said portion of said content, connect to a hardware encryption device which is 
configured to isolate imbedded links, receive encrypted content from said hardware 

25 encryption device, and transmit encrypted content to said PDA; receiving said encrypted 
content from said PDA portal; storing said encrypted content in encrypted form; and, 
receiving a pass-phrase from said user to authenticate said user and decrypt said 
content. 

BRIEF DESCRIPTION OF EXEMPLARY DRAWINGS 

30 Additional aspects of the present invention will become evident upon reviewing 

the non-limiting embodiments described in the specification and the claims, in 
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conjunction with tlie accompanying figures, wherein like numerals designate like 
elements, and wherein: 

FIG. 1 is a schematic block diagram illustrating an exemplary PDA portal 
registration process and system in accordance with various aspects of the present 
invention; 

FIG. 2 is a schematic block diagram illustrating an exemplary process and 
system for establishing a session for secure content using a PDA portal in accordance 
with various aspects of the present invention; 

FIG. 3 is a schematic block diagram illustrating an exemplary process and 
system for registration and establishing a session for secure content using a PDA portal 
in accordance with various aspects of the present invention; 

FIG. 4 is a schematic block diagram illustrating systems and processes for 
exemplary channel updates using a PDA portal in accordance with various aspects of 
the present Invention; 

FIG. 5 is a process flow illustrating an exemplary system and process for 
supporting secure content using a PDA portal in accordance with various aspects of the 
present invention; and, 

FIG. 6 is a process flow illustrating an another exemplary system and process for 
supporting secure content using a PDA portal in accordance with various aspects of the 
present invention. 

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS 

The following disclosure presents and describes various exemplary embodiments 
in sufficient detail to enable those skilled in the art to practice the invention, and it should 
be understood that other embodiments may be realized without departing from the spirit 
and scope of the Invention. Thus, the following detailed description is presented for 
purposes of illustration only, and not of limitation, and the scope of the invention is 
defined solely by the appended claims. 

The present invention may be described herein in terms of functional block 
components and various processing steps. It should be appreciated that such functional 
blocks may be realized by any number of hardware and/or software components 
configured to perform the specified functions. For example, the present invention may 
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employ various integrated circuit components, e.g., memory elements, processing 
elements, logic elements, look-up tables, and the like, which may carry out a variety of 
functions under the control of one or more microprocessors or other control devices. 
Similarly, the software elements of the present invention may be implemented with any 
programming or scripting language such as C, C++, Java, COBOL, assembler, PERL, 
or the like, with the various algorithms being implemented with any combination of data 
structures, objects, processes, routines, or other programming elements. Further, it 
should be noted that the present invention may employ any number of conventional 
techniques for data transmission, signaling, data processing, network control, and the 
like. For a basic introduction to cryptography, please review a text written by Bruce 
Schneider which is entitled "Applied Cryptography: Protocols, Algorithms, And Source 
Code In C," published by John Wiley & Sons (second edition, 1996), which is hereby 
incorporated by reference. 

It should be appreciated that the particular implementations shown and described 
herein are illustrative of the invention and its best mode and are not intended to 
otherwise limit the scope of the present invention in any way. Furthermore, the 
connecting lines shown in the various figures contained herein are intended to represent 
exemplary functional relationships and/or physical couplings between the various 
elements. It should be noted that many alternative or additional functional relationships 
or physical connections may be present in a practical incentive system implemented in 
accordance with the invention. 

Communication between participants in the system of the present invention is 
accomplished through any suitable communication means, such as, for example, a 
telephone network, public switch telephone network, intranet, Internet, extranet, WAN, 
LAN, point of interaction device (e.g., point of sale device, personal digital assistant, 
cellular phone, kiosk terminal, automated teller machine (ATM), etc.), online 
communications, off-line communications, wireless communications, satellite 
communications, and/or the like. One skilled in the art will also appreciate that, for 
security reasons, any databases, systems, or components of the present invention may 
consist of any combination of databases or components at a single location or at 
multiple locations, wherein each database or system includes any of various suitable 
security features, such as firewalls, access codes, encryption, de-encryption, 
compression, decompression, and/or the like. 



Sobelmh\PHX\l 143894.2 



9 



Docket No. 40655.4100 



EL609006829US 



It further will be appreciated that users may interact with the system via any input 
device such as a keyboard, mouse, kiosk, personal digital assistant, handheld computer 
(e.g., Palm Pilot®), cellular phone, and/or the like. Similarly, the invention could be used 
in conjunction with any type of personal computer, network computer, workstation, 
minicomputer, mainframe, or the like, running any operating system, such as any 
version of Windows, Windows NT, Windows 2000, Windows 98, Windows 95, MacOS, 
OS/2, BeOS, Linux, UNIX, or the like. Moreover, although the invention may be 
described herein as being implemented with TCP/IP communications protocols, it will be 
readily understood that the invention could also be implemented using IPX, Appletalk, 
IP-6, NetBIOS, OSI, or any number of existing or future protocols. Moreover, the 
system contemplates the use, sale, or distribution of any goods, services, or information 
over any network having similar functionality described herein. 

Each participant or user of the system of the present invention, including 
purchasers, retailers, manufacturers, and a third-party providers, may be equipped with 
a suitable computing system to facilitate online communications and transactions with 
any other participant. For example, some or all participants may have access to a 
computing unit in the fomi of a personal computer, although other types of computing 
units may be used, including laptops, notebooks, handheld computers, set-top boxes, 
kiosk terminals, and the like. Additionally, other participants may have computing 
systems which may be implemented in the form of a computer-server, a PC server, a 
networked set of computers, or any other suitable implementations which are known in 
the art or may hereafter be devised. 

The computing systems may be connected with each other via a data 
communications network as described more fully above. For example, the network may 
be a public network, which is assumed to be insecure and open to eavesdroppers. In 
one embodiment, the network is embodied as the Internet, in this context, the 
computers may or may not be connected to the Internet at all times. For instance, the 
consumer's computer may employ a modem to occasionally connect to the Internet, 
whereas the retailer computing system, the manufacturer computing system, and the 
central rewards mechanism might maintain a permanent connection to the Internet. It is 
noted that the network may be implemented as other types of networks, such as an 
interactive television (ITV) network. 

The retailer's computer system may also be interconnected to a third-party 
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provider via a second network, referred to as a payment network. The payment network 
represents existing proprietary networks that presently accommodate transactions for 
credit cards, debit cards, and other types of financial instruments or banking cards. The 
payment network is a closed network that is assumed to be secure from eavesdroppers. 
Examples of the payment network include the American Express®, VIsaNet®, and the 
Veriphone® networks. 

As will be appreciated by one of ordinary skill in the art, the present invention 
may be embodied as a method, a data processing system, a device for data processing, 
and/or a computer program product. Accordingly, aspects of the present invention may 
take the form of an entirely software embodiment, an entirely hardware embodiment, or 
an embodiment combining aspects of both software and hardware. Furthermore, the 
present invention may take the form of a computer program product on a computer- 
readable storage medium having computer-readable program code means embodied in 
the storage medium. Any suitable computer-readable storage medium may be utilized, 
including hard disks, CD-ROM, optical storage devices, magnetic storage devices, 
and/or the like. 

The present invention is described below with reference to block diagrams and 
flowchart illustrations of methods, apparatus (e.g., systems), and computer program 
products according to various aspects of the invention. It will be understood that each 
functional block of the block diagrams and the flowchart illustrations, and combinations 
of functional blocks in the block diagrams and flowchart illustrations, respectively, can 
be implemented by computer program instructions. These computer program 
instructions may be loaded onto a general purpose computer, special purpose 
computer, or other programmable data processing apparatus to produce a machine, 
such that the instructions which execute on the computer or other programmable data 
processing apparatus create means for implementing the functions specified in the 
flowchart block or blocks. 

These computer program instructions may also be stored in a computer-readable 
memory that can direct a computer or other programmable data processing apparatus to 
function in a particular manner, such that the instructions stored in the computer- 
readable memory produce an article of manufacture including instruction means which 
implement the function specified in the flowchart block or blocks. The computer 
program instructions may also be loaded onto a computer or other programmable data 
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processing apparatus to cause a series of operational steps to be performed on the 
computer or other programmable apparatus to produce a computer-implemented 
process such that the instructions which execute on the computer or other 
programmable apparatus provide steps for implementing the functions specified in the 
5 flowchart block or blocks. 

Accordingly, functional blocks of the block diagrams and flowchart illustrations 
support combinations of means for performing the specified functions, combinations of 
steps for performing the specified functions, and program instruction means for 
performing the specified functions. It will also be understood that each functional block 
10 of the block diagrams and flowchart illustrations, and combinations of functional blocks 
in the block diagrams and flowchart illustrations, can be implemented by either special 
purpose, hardware-based computer systems which perfonn the specified functions or 
steps, or suitable combinations of special purpose hardware and computer instructions. 

Pi As used herein, the terms "user** and "participant" shall interchangeably refer to 

15 any person, entity, charitable organization, machine, hardware, software, or business 
who accesses and uses the system of the invention, including consumers, retailers, 

% manufacturers, and third-party providers. Participants in the system may interact with 

i one another either online or off-line. As used herein, the term "online" refers to 

^S^f interactive communications that takes place between participants who are remotely 

rii 20 located from one another, including communication through any of the networks or 

tl communications means described above or the like. 

M 
Hf 

The term "manufacturer" shall include any person, entity, charitable organization, 
machine, software, hardware, and/or the like that manufactures, distributes, or 
originates a product or service which may ultimately be offered to a consumer directly or 

25 indirectly through a retailer. The term "manufacturer" may also include any party that 
generates an6loT provides manufacturer item identifiers. The term "retailer" shall 
include any person, entity, charitable organization, machine, software, hardware, and/or 
the like that that offers a product or service to a consumer. As used herein, the term 
"retailer" is used interchangeably with the term "merchant". Moreover, in this context, a 

30 retailer or merchant may offer or sell, either online or offline, products and/or services 
made or supplied by at least one manufacturer. As used herein, the phrases "network 
level" and "network-wide level" shall refer to a system that includes more than one 
retailer and at least one manufacturer. 
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As used herein, the terms "purchaser", "customer", "consumer", and "end-user" 
may be used interchangeably with each other, and each shall mean any person, entity, 
charitable organization, or business which uses a consumer ID to participate in the 
present system. A "consumer ID", as used herein, includes any device, code, or other 
identifier suitably configured to allow the consumer to interact or communicate with the 
system, such as, for example, a rewards card, charge card, credit card, debit card, 
prepaid card, telephone card, smart card, magnetic stripe card, bar code card, 
authorization/access code, personal identification number (PIN), Internet code, other 
identification code, and/or the like. Additionally, a "consumer ID" may comprise any 
form of electronic, magnetic, and/or optical device capable of transmitting or 
downloading data from itself to a second device which is capable of interacting and 
communicating with such forms of consumer ID. 

A consumer may register to participate in the present system by any methods 
known and practiced in the art. For example, a consumer may be enrolled automatically 
(e.g. if the consumer holds an existing account with the system administrator), over the 
phone, at the point of sale through a paper application or verbal interview, through the 
mail, or through instant enrollment online. Consumer enrollment data may comprise any 
of the following: name; address; date of birth; social security number, email address; 
gender; the names of any household members; a credit card number for charging any 
fees that may be associated with participation in the system; sun/ey data; interests; 
educational level; and/or any preferred brand names. Upon enrollment, the consumer 
receives a consumer ID. The consumer ID may be associated with a household 
account which specifies the consumer as a primary member and permits the 
identification of supplementary members associated with the consumer's household 
who may also earn reward points for the consumer. 

A "consumer profile", as used herein, shall refer to any data used to characterize 
a consumer and/or the behavior of a consumer. In the context of a commercial 
transaction, "a consumer profile" shall be understood to include, for example, the time 
and date of a particular purchase, the frequency of purchases, the volume/quantity of 
purchases, the transaction size (price), and/or the like. Additionally, in other 
transactional contexts, the term "consumer profile" shall also be understood to include 
non-purchase behaviors of a consumer, such as consumer enrollment data, visiting a 
Web site, referrals of prospective participants in the system, completion of a survey or 
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other information gathering instrument, and/or the like. For instance, a participating 
online consumer may earn rewards points automatically through a triggering event, such 
as visiting a Web site, completing an online survey, or clicking on a banner 
advertisement for example. Offline, a participating consumer may earn rewards points 
by completing a task or showing their consumer ID to the cashier and triggering the 
cashier to provide a "behavior" ID which may be input (e.g., by scanning a bar code on a 
paper survey for example) into the POS terminal. Further, any aspects of the consumer 
profile may be used in the context of data analysis. 

A "third-party provider" may comprise any additional provider of goods and/or 
services to a consumer. Specifically, a "third-party provider" Includes any party other 
than the particular manufacturer and retailer who is involved in a transaction with a 
consumer. A third-party provider may Include, for example, a financial institution, such 
as a bank or an issuer of a financial instrument (such as a credit card or a debit card). A 
third-party provider may also include a provider of goods and services which are offered 
as awards to consumers in exchange for a requisite number of reward points. 

Though the invention may generically be described with reference to a series of 
transactions which transfer a good or service from an originating party to an 
intermediary party and a subsequent transaction which transfers the good or service 
from the intermediary party to an end-user of that good or service, for convenience and 
purposes of brevity and consistency, the present disclosure generally refers to the 
originating party as a manufacturer, the intermediary party as a retailer, the end-user as 
a consumer, and a good or service as a product or item. However, it will be recognized 
by those of ordinary skill in the art that the retailer need not provide a product or item to 
a consumer in exchange for monetary currency. While this often may be the case, the 
present disclosure is not so limited and includes transactions which may be gratuitous In 
nature, whereby the retailer transfers a product or item to a consumer without the 
consumer providing any currency or other value in exchange. It Is further noted that 
additional participants, referred to as third-party providers, may be involved in some 
phases of the transaction, though these participants are not shown. Exemplary third- 
party providers may include financial institutions, such as banks, credit card companies, 
card sponsoring companies, or issuers of credit who may be under contract with 
financial institutions. It will be appreciated that any number of consumers, retailers. 
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manufacturers, third-party providers, and the like may participate in the system of the 
present invention. 

As used herein, the term "UPC" and the phrase "manufacturer item identifier" 
shall refer to any symbol or indicia which provides information and, in an exemplary 
embodiment, shall refer to any number, code, or identifier assigned by a manufacturer 
and associated with an item, including any type of goods and/or services, ultimately 
offered to a consumer or other end-user. Colloquially, a UPC is sometimes referred to 
as a SKU number. However, as used herein, the term "SKU" and the phrase "retailer 
item identifier" shall refer to any symbol or indicia which provides additional information 
and, in an exemplary embodiment, shall refer to any number, code, or identifier 
assigned by a retailer and associated with an item, including any type of goods and/or 
services, offered to a consumer or other end-user. 

"Purchase data", as used herein, comprises data relating to the offer of any item 
to a consumer or other end-user. Purchase data may include any of the following: an 
item purchased, an item price, a number of items purchased, a total transaction price, a 
payment vehicle, a date, a store identifier, an employee identifier, a retailer item 
Identifier, a loyalty identifier, and/or the like. 

"Retailer ID", as used herein, comprises any symbol, indicia, code, number, or 
other identifier that may be associated with a retailer of any type of goods and/or 
services offered to a consumer or other end-user. A retailer ID may also include or be 
associated with a "store ID", which designates the location of a particular store. A 
"manufacturer ID" comprises any symbol, indicia, code, number, or other identifier that 
may be associated with a manufacturer of any type of goods and/or services ultimately 
offered to a consumer or other end-user. 

An "award" or "reward" may comprise any quantity of products, services, 
coupons, gift certificates, rebates, reward points, bonus points, credits or debits to a 
financial instrument, any combination of these, and/or the like. 

"Data analysis", as used herein, shall be understood to comprise quantitative and 
qualitative research, statistical modeling, regression analyses, market segmentation 
analyses, econometrics, and/or the like. Such analyses may be used to predict 
consumer behaviors and/or correlate consumer profiles, retailer data, manufacturer 
data, and/or product or service data. 
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The system of the present invention associates or maps manufacturer UPC data 
and retailer SKU data on a network level to reward consumers and/or to analyze the 
data for a variety of business purposes, such as market segmentation analyses and/or 
analyses relating to consumer spending behaviors or patterns for example. Rather than 
simply capturing transactions at a Record of Charge (ROC) level, that is, recording 
consumer purchases in a general fashion by designating purchase categories (such as 
"clothing", "electronics", or "hardware" for example), the system identifies the particular 
item purchased (such as "jeans", "stereo", or "hammer" for example) as well as its 
corresponding manufacturer. By matching or associating the retailer SKU and the 
manufacturer's UPC, the system permits the standardization of goods and/or services 
codes at the network level. This standardization not only permits a record of both the 
specific item purchased and its manufacturer, regardless of the particular retailer 
involved in the transaction, but it permits the mapping of multiple consumers, multiple 
goods and/or services, multiple retailers, and/or multiple manufacturers to 
advantageously cross-market goods and services to consumers. 

In accordance with one aspect of the invention, the association of UPC and SKU 
data by the system facilitates implementation of an incentive or loyalty program by 
providing a universal rewards currency which may be "spent" by participants who have 
earned rewards and accepted by the other participants in the multi-tiered network 
created by the system. The network may comprise any number of participants, 
including consumers, retailers (and any of their employees), manufacturers, third-party 
providers, and the like. Each of these categories of participants may be considered a 
tier in the network, and each participant within the various tiers may design and 
implement an independent rewards scheme within the context of the universal 
environment provided by the system. For example, Manufacturer 1 may produce and 
assign a UPC to Item X. Item X may subsequently be offered for sale by both Retailer 1 
and Retailer 2. Retailer 1 and Retailer 2 may then each assign an independent SKU 
number to Item X to facilitate their own tracking, inventory, and pricing schemes. A 
consumer may then purchase Item X from both Retailer 1 and Retailer 2. 

Since the system is capable of processing, associating, and quantifying a variety 
of data, including consumer data, employee data, retailer data, manufacturer data, SKU 
number data corresponding to Item X, and UPC data assigned by Manufacturer 1, for 
example, this data can then be used by the manufacturer, the retailer, the system 
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administrator, and/or a third-party provider to provide rewards to consumers, 
employees, retailers, etc. For example, a manufacturer may provide frequency-based 
incentives, such as every lO^h purchase of a particular item will be discounted by 50% 
for example, independent of and/or in addition to any incentives offered by the specific 
5 retailer involved in the transaction. Additionally, the manufacturer may provide sales 
incentives to the employees of retailers independent of and/or in addition to any 
employee incentive programs that the retailers may choose to implement. 

Since rewards, which may be in the form of rewards points, may be earned 
across the various tiers in the network, rewards may also be used or spent across the 
10 various tiers in the network. Thus, any rewards points that an employee, for example, 
may earn by promoting a particular manufacturer's line of products, may be "spent" by 
that employee on goods or services provided by any participant in the network, not 
^ merely at the retailer who employs that employee. Likewise, any rewards points earned 

b by a consumer may be spent on goods or services offered by any participant in the 

m 15 network. 

Ti in accordance with another aspect of the invention, the association of UPC and 

% SKU data by the system facilitates data analysis on a network level based upon several 

T factors, including any of the following: consumer ID, consumer profile, retailer ID, SKU 

O number, UPC, manufacturer ID, and/or the like. The system may compile any of the 

ry 20 above data across multiple participants for the purpose of data analysis, such as 
2 analyses which may be employed in strategic planning and marketing for example. The 

ri system of the invention may be used to compile, analyze, and report data in a manner 

which would inform any or all network participants that, for example, a specific 
consumer (1) has made multiple purchases of particular manufacturers' products; (2) 
25 has spent Q dollars over a certain time period (3) at specific multiple retailers; and (4) of 
the purchases made, R dollars went towards the purchase of Product 1, 8 dollars went 
towards the purchase of Product 2, and T dollars went towards the purchase of Service 
1 . Moreover, the system may be used to compile, analyze, and report data that enable 
a retailer, a manufacturer, and/or a third-party provider to create a variety of targeted 
30 marketing promotions, such as, for example, (1) marketing Product 1 offered by 
Manufacturer 1 to consumers who purchase Product 2 offered by Manufacturer 2; (2) 
marketing Product 1 offered by Manufacturer 1 and sold by Retailer X to consumers 
who purchase Product 2 offered by Manufacturer 2 at Retailer Y; (3) marketing Product 
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1 offered by Manufacturer 1 and sold by Retailer X to consumers who purchase Product 

2 offered by Manufacturer 2 at Retailer Y five times a year. It will be appreciated that 
these are but a few of the many possible applications for data gathered and generated 
by the system of the present invention. 

5 In accordance with a further aspect of the invention, the system administrator 

may allocate rewards points to participants in the system. In one embodiment, 
participating retailers and/or manufacturers may purchase points from the system 
administrator and the points are then allocated to an account associated with the retailer 
and/or manufacturer. In an alternate embodiment, the system administrator may give or 
10 donate points to participating retailers and/or manufacturers. The system administrator 
maintains an account with each of the participating retailers and manufacturers and 
tracks available points balances and/or balances owing on a rolling basis. The points 
purchased by the retailers and/or manufacturers may then be earned by and issued to 
3 consumers in a manner that is predetermined by the retailer and/or manufacturer 

i 15 involved in the transaction with the consumer. For example, Retailer 1 may purchase 

i 10,000 points from the system administrator and then offer consumers 1 point for every 
3 $10 dollars spent in Retailer 1 's store or, perhaps, some number of points for every fifth 

transaction in the store. Moreover, Manufacturer 1, who produces the product offered 
a by Retailer 1, may also purchase points from the system administrator. Thus, when a 

ii 20 consumer purchases Manufacturer 1's product at Retailer 1, Manufacturer 1 may issue 
01 some number of points to the consumer. The issuance of points, either by retailers or 

manufacturers, may be based upon any selected criteria, including a points-for-dollars 
ratio, a defined quantity of points per item or per transaction, some combination of 
these, and/or the like. 

25 The system administrator maintains an account for each participating consumer 

and apprises the consumer of the points totals and account activity. The consumer may 
review the total number of points in the account either online or off-line, such as through 
a periodic statement sent by the system administrator or through the use of a 
communications network, such as the Internet, for example. Points in the consumer's 

30 account are accumulated across the multiple retailers and/or manufacturers participating 
in the system. Thus, points earned by a consumer based upon transactions with 
different retailers and/or manufacturers are combined, resulting in a rapid accrual of 
points. The system administrator offers a catalog of products and services, which may 
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be either online or off-iine, from which consumers may select rewards in exchange for 
accrued points. In this manner, consumers advantageously earn points based upon 
their everyday purchases of products and services, these points are accrued across 
retailers and/or manufacturers, and points redemption tal<es place through a single, 
5 universal catalog of rewards. 

In accordance with the present invention, FIG. 1 is a diagram illustrating an 
exemplary embodiment of an incentive or loyalty system 100. System 100 comprises a 
central rewards mechanism 102; a plurality of retailer/merchant systems 104; and at 
least one manufacturer 106. One skilled in the art will appreciate that system 100 may 
10 comprise any number of retailer systems 1 04 and any number of manufacturers 1 06. 

The central rewards mechanism 102 manages the incentive or loyalty program of 
the system 100. In an exemplary embodiment, central rewards mechanism 102 
receives, processes, and stores manufacturer data, such as infomriation regarding 
products and/or services and UPC data, transmitted by manufacturers 106 who have 
15 enrolled in the system 100. Manufacturers 106 may transmit data to central rewards 
mechanism 102 in any form and by any means known in the art, including any of the 
communications means described above. The manufacturer data is stored by the 
central rewards mechanism 102 in database 103. Database 103 may be any type of 
database, such as relational, hierarchical, object-oriented, and/or the like. Common 
20 database products that may be used to implement database 103 include DB2 by IBM 
? (White Plains, NY), any of the database products available from Oracle Corporation 

(Redwood Shores, OA), Microsoft Access by Microsoft Corporation (Redmond, 
Washington), or any other database product. Database 103 may be organized in any 
suitable manner, including as data tables or lookup tables. 
25 The central rewards mechanism 102 may receive and process consumer ID 

information and purchase data from any of the retailer systems 104. The central 
rewards mechanism 102 may also associate a particular consumer ID with the purchase 
data and a corresponding manufacturer item identifier. In one embodiment, the central 
rewards mechanism 102 performs an analysis involving any of the following: a 
30 consumer ID, purchase data, a points ratio, a consumer profile, a retailer ID, and a 
manufacturer ID. The analysis may be dependent upon an the association of the 
consumer IDs, the purchase data, and the manufacturer item identifier. The analysis 
may further comprise, for example, a calculation of rewards points and/or other analyses 
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for purposes of market segmentation, determining consumer spending belnavior, 
correlating spending beliavior and consumer demograpfiics, and/or tfie iil<e, as 
described in greater detail above. 

In one exemplary embodiment, tine central rewards mecfianism 102 stores and 
informs a consumer of the rewards points that have been earned by a particular 
transaction as well as accumulated over time. The number of rewards points calculated 
and awarded by the central rewards mechanism 102 for a particular purchase may 
depend upon a predetermined rewards ratio. The rewards ratio may be determined by 
the retailer, the system administrator, the manufacturer of the purchased item, and/or 
any other suitable third-party. For example, if a participating consumer buys a product 
from a retailer for $100 and if the retailer rewards ratio Is one reward point for each 
dollar of the purchase price {i.e., one-for-one), once the consumer's consumer ID is 
identified by the system, the consumer is credited with a suitable number of rewards 
points from the retailer, which, in this case, would be 100 points. However, if the 
manufacturer also chooses to issue rewards points for the item purchased, the 
manufacturer may select a points ratio that is different from the retailer's selected ratio. 
In the illustrated example, if the manufacturer's selected points ratio is two-for-one, then 
the consumer will be awarded an additional 200 points from the manufacturer for this 
single $100 purchase. In this manner, the system of the invention may provide "earn 
accelerators" through which consumers may accumulate rewards points at 
comparatively rapid rate, in other words, a single purchase may generate rewards 
points for a consumer from any or all of a retailer, a manufacturer, and/or a third-party 
provider, and those rewards points may be used as rewards currency by the consumer 
throughout the network established by the system of the invention. 

In an exemplary embodiment, retailer system 104 comprises a retailer terminal 
1 08 and a retailer processor 1 1 0 in communication with database 111. Retailer terminal 
108 comprises any device capable of identifying a consumer ID. Exemplary devices for 
identifying a consumer ID may include a conventional card reader which recognizes a 
magnetic stripe or bar code associated with a consumer ID, a biometric device, a smart 
card reader which recognizes information stored on a microchip integrated with a 
consumer ID, and any device capable of receiving or uploading consumer ID data 
transmitted electronically, magnetically, optically, and/or the like. In one embodiment, 
retailer terminal 108 and retailer processor 110 are co-located at a retail store. In 
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another embodiment, retail terminal 108 and retailer processor 110 are remote from 
each other. 

In an exemplary embodiment, as illustrated in FIG. 2, retailer terminal 108 
comprises a retailer POS terminal 112, such as a cash register for example. When a 
consumer ID is used at the time an item is purchased, purchase data, including a SKU 
number, is input, sensed, or otherwise recognized by terminal 108, and then the 
purchase data is processed and stored by retailer processor 110. Retailer processor 
110 comprises or is in communication with a suitable database 111 or other storage 
device for maintaining and storing purchase data and any other suitable retailer 
information. Database 1 1 1 may be any type of database, such as any of the database 
products described above for example. Database 1 1 1 may be organized in any suitable 
manner, including as data tables or lookup tables. Purchase data that is stored in 
database 111 is available to the retailer's local back office system (not shown) for 
inventory, accounting, tax, data analysis, and other purposes. The captured purchase 
data may include the item purchased, the item's unit price, the number of items 
purchased, the date, the store location, an employee ID, and any other information 
related to the purchase. In an exemplary embodiment, retailer processor 110 may also 
receive, process, and store manufacturer data, such as information regarding products 
and/or services and UPC data, from manufacturers 106 who have enrolled in the system 
100. The manufacturer data may be stored in any suitable form, including data tables or 
lookup tables. 

In accordance with the exemplary embodiments illustrated in FIG. 3, purchase 
data may also be transmitted to and stored and processed by a retailer regional 
processor 114 (or, alternatively, a retailer national database (not shown)) in 
communication with database 1 15 for the purpose of further back office and cumulative 
data analysis. Database 115 may be any type of database, such as any of the database 
products described in greater detail above for example. Database 115 may be 
organized in any suitable manner, including as data tables or lookup tables, in an 
exemplary embodiment, retailer processor 110 optionally may be integrated with retailer 
regional processor 114 (illustrated by the phantom lines encompassing Retailer 
Processor 1 and retailer regional processor 114 within the system of Retailer/Merchant 
#2), thereby forming a single device. In another embodiment, retailer processor 110 
and retailer regional processor 1 14 are separate devices which may be either co-located 
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with each other or remotely located from one another. For example, in one 
embodiment, retailer processor 110 and regional processor 114 are co-located at a 
particular retail store. In another embodiment, retailer processor 110 is located at a 
particular retail store and retailer regional processor 114 is remotely located at a 
5 regional office. 

Regardless of the location of retailer regional processor 114, retailer regional 
processor 114 receives and processes similar information from each of the retailer 
processors 110 associated with each of the retail stores owned by the same retailer. 
Whether the system 100 comprises a retailer regional processor 114 or a retailer 
10 national processor may be a function of the number of stores maintained by a particular 
retailer. That is, a larger retailer who has numerous stores throughout the country, for 
example, may choose to have a plurality of regional processors, while a smaller retailer 
with a few stores scattered across the country may be better served by a single, national 
b processor. In exemplary embodiments, the retailer regional processors 114 and/or 

y 15 national processors communicate with a suitable database 1 15 or other storage device 
S which is configured to store and maintain purchase data and any other suitable retailer 

5 information. In another exemplary embodiment, retailer regional processor 114 may 

¥ receive, process, and store manufacturer data, such as information regarding products 

O and/or services and UPC data, from manufacturers 106 who have enrolled in the system 

W 20 100. The manufacturer data may be stored in any suitable form, including data tables or 
lookup tables. 

With momentary reference to FIG. 2, retailer terminal 108 may comprise a 
rewards terminal 116 through which a consumer may be updated with regard to various 
aspects of the system. For example, rewards terminal 116 may inform a consumer of 
25 the number of reward points that they have accumulated from all system participants 
and the types of awards that may be obtained using those reward points. Moreover, 
rewards terminal 116 may suggest to the consumer various awards for which the 
consumer is eligible based upon the rewards points generated by the consumer's 
network-wide purchases. In this context, network-wide purchases include any 
30 purchases of items corresponding to retailers and/or manufacturers participating in the 
system 100. 

In an exemplary embodiment, rewards terminal 116 operates in real-time. In this 
context, "real-time" means that reward points are immediately, or nearly immediately, 
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updated at the time purchases are made and are therefore immediately redeemable by 
the consumer at the a point of sale. Thus, for example, a consumer may be informed by 
rewards terminal 1 1 6 at the point of sale that the item being purchased by the consumer 
may be purchased using the consumer's accumulated reward points, including points 
accumulated on a network level. Points accumulated on a network level enable 
consumers to accumulate points more rapidly than would be possible if only a single 
retailer or group of retailers were issuing the points. In one embodiment, rewards 
terminal 116 may update a consumer's rewards points in real-time and, in response to 
the consumer's particular points total, issue a coupon, a gift certificate, and/or additional 
bonus points to the consumer. 

In another exemplary embodiment, the system may operate in batch mode, 
wherein points totals are calculated, stored, and periodically updated for access by the 
retailer temiinal 108, including POS terminal 112 and/or rewards terminal 116. Thus, in 
this embodiment, the consumer may be notified of available points sometime after a 
purchase, or a suggestive sale may take place after a purchase. The total point count 
or suggestive sale may take into account points generated and accumulated as the 
result of network-wide purchases. 

In various alternate embodiments of the invention, retailer terminal 108 may 
include a rewards terminal 1 16 but not a POS terminal 1 12; a POS terminal 1 12 but not 
a rewards terminal 116; or a POS terminal 112 in communication with a rewards 
terminal 116. In alternate embodiments, where terminal 108 includes a POS terminal 
112 and a rewards terminal 116, the two terminals 112 and 116 may be variously 
implemented as separate terminals, integrated terminals, or software within a device. In 
another embodiment, where terminal 108 comprises a rewards terminal 116 but not a 
POS terminal 112, terminal 108 may be a kiosk terminal located within a retail store or 
some other remote terminal which is capable of recognizing a consumer ID and 
communicating with the system 100. A consumer may use independent rewards 
terminal 1 1 6 to do, for example, any of the following: view accumulated reward points 
totals; view potential awards which the consumer may obtain in exchange for various 
numbers of points; select an award; redeem rewards points for a selected award; 
request and/or receive a reward points advisory statement; and/or view a directory of 
participating retailers, manufacturers, and third-party providers. 
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In another exemplary embodiment, system 100 further comprises a consumer 
terminal 1 1 8. Consumer terminal 1 1 8 is any remote temiinal through which a consumer 
may access other aspects of the system 100. Consumer terminal 118 may comprise 
any of the input devices, computing units, or computing systems described above. 

5 Further, consumer terminal 118 communicates with the system 100 through any of the 
communications networks described above. In one embodiment, consumer terminal 
118 permits a consumer to engage multiple facets of the system 100 in an interactive 
online communications environment. The interactive online environment made available 
through consumer terminal 118 is an extension of the network-level incentive award 

10 program and is implemented in conjunction with other aspects of the system 100. In this 
context, a consumer may uses consumer terminal 1 18 for a variety of purposes. In one 
embodiment, consumer terminal 118 may be used to communicate with and receive 
information from the central rewards mechanism 102. For example, a consumer may 
use consumer terminal 118 to do any of the following: enroll in the system; receive 

15 statements or reports regarding accumulated reward points totals; receive bonus details; 
view potential awards which the consumer may obtain in exchange for various numbers 
of points; select an award; receive redemption information; view points adjustments; 
redeem rewards points for a selected award; request and/or receive a reward points 
advisory statement; receive information regarding where and how points were earned 

20 and/or how points were redeemed; receive information regarding expiration dates for 
points earned; receive infomiation relating to any applicable fees; receive information 
regarding marketing promotions; and/or view a directory of participating retailers, 
manufacturers, and/or third-party providers. 

In another embodiment, consumer temiinal 118 may be used to Interact with 

25 and/or make purchases and generate rewards points from participating online retailers, 
as illustrated by the various phantom lines in FIG. 1. The online retailer may then 
communicate with the central rewards mechanism 102 to transmit and process a 
consumer ID, purchase data, etc., as described above with reference to retailer 104 of 
FIG. 1. Information communicated between the online consumer, the online retailer, 

30 and the online central rewards mechanism may include, for example, product or service 
infomiation, prices, availability of the product or service, shipping information, rewards 
points information, available awards. Information regarding points ratios and points 
redemption, and/or the like. In one embodiment, consumer terminal 118 operates in 
real-time, as described above with respect to rewards terminal 116. In another 
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embodiment, the consumer temninal 118 may operate in batch mode, as described 
above. In still a further embodiment, consumer terminal 118 operates in a manner 
which includes aspects of both real-time functionality and batch mode functionality. 

In accordance with a further aspect of the invention, the system 100 may 
comprise a rewards server 120 in communication with a database 121, as illustrated in 
FIG. 2. Database 121 may be any type of database, such as any of the database 
products described above for example. Database 121 may be organized in any suitable 
manner, including as data tables or lookup tables. In an exemplary embodiment, 
rewards server 120 may be any hardware and/or software that is configured to 
communicate with the central rewards mechanism 102 and either the retailer processor 
110 or the retailer regional processor 114. in alternate exemplary embodiments, 
rewards server 120 may be integrated with retailer system 104; rewards server 120 may 
be integrated with central rewards mechanism 102; or rewards server 120 may be 
separate from both retailer system 104 and central rewards mechanism 102. In a 
further embodiment, the rewards server 120 may communicate with both a retailer 
national processor (not shown) and the central rewards mechanism 1 02. 

In an exemplary embodiment, rewards server 120 receives, processes, and 
stores both manufacturer data and retailer data. Manufacturer data may include 
descriptions of products and/or services and UPC data transmitted from manufacturers 
106 who have enrolled in the system 100. The manufacturer data may be stored in any 
suitable form, including data tables or lookup tables. Retailer data may include 
descriptions of products and/or services and SKU data transmitted from retailers 104 
who have enrolled in the system 100. The retailer data may be stored in any suitable 
form, including data tables or lookup tables. 

In an exemplary embodiment, the rewards server 120 performs a plurality of 
functions that might othenwise be performed by the central rewards mechanism 102. 
For example, since rewards calculations require significant processing and memory 
resources, performance of calculations processing by the rewards server 120 at the 
regional level lessens the processing load on the central rewards mechanism 102, 
thereby increasing the efficiency of the central rewards mechanism 102. In an 
exemplary embodiment, each retailer's region, which comprises a plurality of that 
retailer's stores or outlets, accesses a rewards server 120 which acts as an intermediary 
between the retailer regional processor 114 and the central rewards mechanism 102. 
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This configuration relieves the processing, power, memory, and other requirements of 
the central rewards mechanism 102. Moreover, each retailer is but one of many 
retailers that may participate in the network level rewards structure. Accordingly, a 
plurality of rewards servers 120 may be in communication with the central rewards 
5 mechanism 102 as well as each of the participating retailer regional processors 114, 
further alleviating the processing burden and freeing up the resources of the central 
rewards mechanism 102. 

Implementations which include at least one independent rewards server 120 are 
also advantageous because cost-effective communications links may be used to 

10 facilitate communications with the central rewards mechanism 102. Performance by the 
rewards server 120 of many of the "intelligence functions" of the system 100, permits 
transmission of only particular forms of purchaser information to the central rewards 
mechanism 102. In an exemplary embodiment, data sent from the rewards server 120 
to the central rewards mechanism 102 may include the consumer ID and the total 

15 number of rewards points earned by a consumer in a particular transaction. In another 
exemplary embodiment, data transmitted by the rewards server 120 to the central 
rewards mechanism 102 may also include any pre-selected aspect of the consumer 
profile, any pre-selected aspect of the purchase data, and/or any other pre-selected 
data associated with a consumer, a retailer, a manufacturer, and/or a third-party 

20 provider. Pre-selection of the types of data transmitted by the rewards server 120 to the 
central rewards mechanism 102 may be conducted by the system administrator, a 
retailer, a manufacturer, and/or a third-party provider. Thus, data which may be useful 
for purposes of data analysis but unrelated to the rewards feature, such as the 
characteristics of the particular item purchased for example, may not need to be 

25 transmitted to the central rewards mechanism 102. 

Exemplary functions performed by the rewards sen/er 120 may include the 
association of UPC and SKU data; manipulation of the rewards criteria applicable in 
particular cases, which may further depend upon the retailer, manufacturer, and/or third- 
party provider involved in a specific transaction with a consumer; calculation of rewards 

30 benefits earned by the consumer; filtration functions for determining which data is 
transmitted from the rewards sen/er 120 to the central rewards mechanism 102; and/or 
various types of data analyses, as described above. In an exemplary embodiment, the 
retailer system 104 houses, maintains, and updates the hardware and/or software of the 
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rewards server 120. In another embodiment, rewards server 120 may be housed, 
maintained, and updated by the system administrator. 

in accordance with another embodiment of the present invention, the system 1 00 
permits an open payment system. Since the invention generally provides that consumer 
5 participation in the system is based upon a consumer ID, a purchaser may use any of 
multiple payment vehicles (such as cash, check, charge card, credit card, debit card, 
IVlasterCard®, Visa®, and/or the American Express® Card for example) to make 
purchases at the various retailers and still participate in the system. Thus, in one 
embodiment, the consumer ID is independent of any particular payment vehicle, such as 
10 a credit card for example. 

However, alternate embodiments of the invention may be implemented which 
associate a consumer ID with a particular payment vehicle, such as a consumer's credit 
U card account, charge card account, debit card account, and/or bank account for 

2 example. In this embodiment, the retailer conducting the transaction need only 

S 15 participate in the system to the extent that the retailer provides its SKU data to the 
system 100, such as to the rewards server 120. In other words, when a consumer ID is 
«P associated with an instrument (e.g., a credit card) from a third-party provider, the retailer 

'T need not provide a rewards terminal or other terminal capable of processing the 

O consumer ID, since the third-party provider may process the consumer ID as part of the 

ft i 20 payment transaction. Thus, in this embodiment, rewards benefits may be earned by the 
consumer on a network-wide level without the retailer's direct participation in the 
Sj rewards feature (notwithstanding the retailer's participation In transmitting SKU data to 

the system). Moreover, It will be appreciated that a single consumer ID may be 
associated with multiple third-party payment vehicles, thereby allowing a consumer to 
25 generate rewards points regardless of the particular payment vehicle selected for a 
particular purchase. 

With reference to FIG. 4, an exemplary central rewards mechanism 402 includes 
a central processor 404 in communication with other elements of the rewards 
mechanism 402 through a system interface or bus 406. A suitable display device / input 
30 device 408, such as a keyboard or pointing device in combination with a monitor, may 
be provided for receiving data from and outputting data to a user of the system. A 
memory 410 associated with the rewards mechanism 402 includes various software 
modules, such as an enrollment module 412 and an authentication module 414 for 
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example. The memory 410 preferably further includes an operating system 416 which 
enables execution by processor 404 of the various software applications residing at 
enrollment module 412 and authentication module 414. Operating system 416 may be 
any suitable operating system, as described above. Preferably, a network interface 418 
5 is provided for suitably interfacing with other elements of the incentive awards system, 
such as the elements described above with reference to FIGS. 1-3. 

Lastly, a storage device 420, such as a hard disk drive for example, preferably 
contains files or records which are accessed by the various software modules, such as 
enrollment module 412 and authentication module 414. In particular, consumer data 

10 422 comprises information received from a consumer upon registration with the rewards 
mechanism 402. Consumer rewards 424 comprises data corresponding to each 
consumer's rewards account. Consumer rewards 424 may include cumulative rewards 
points totals as well as historical totals and rewards account activity over time. Retailer 
records 426 comprises information received from the various participating retailers. 

15 Manufacturer records 428 comprises information received from the various participating 
manufacturers. One skilled in the art will appreciate that the storage device 420 and, 
therefore, consumer data 422, consumer rewards 424, retailer records 426, and 
manufacturer records 428 may be co-located with the rewards mechanism 402 or may 
be remotely located with respect to the rewards mechanism 402. If the storage device 

20 420 is remotely located with respect to the rewards mechanism 402, communication 
between storage device 420 and rewards mechanism 402 may be accomplished by any 
suitable communication link but is preferably accomplished through a private intranet or 
extranet. 

Enrollment module 412 receives information from consumers, retailers, and/or 
25 manufacturers who wish to participate in the system. Enrollment module 412 accesses 
and stores information in storage device 420. Authentication and/or validation of the 
identity and status of participants, including any of the other system components, may 
be performed by the authentication module 414, which preferably has access to the 
records residing in storage device 420. 
30 With reference to FIG. 5, an exemplary rewards server 502 includes a central 

processor 504 in communication with other elements of the rewards server 502 through 
a system interface or bus 506. A suitable display device / input device 508, such as a 
keyboard or pointing device in combination with a monitor, may be provided for 
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receiving data from and outputting data to a user of the system. A memory 510 
associated with the rewards server 502 includes a variety of software modules, such as 
an association module 512, a rewards calculation module 514, a data analysis module 
516, and a filtering module 518 for example. The memory 510 preferably further 
5 includes an operating system 520 which enables execution by processor 504 of the 
various software applications residing at the various modules 512, 514, 516, and 518. 
Operating system 520 may be any suitable operating system, as described above. 
Preferably, a network interface 522 is provided for suitably interfacing with other 
elements of the incentive awards system, such as the elements described above with 

10 reference to FIGS. 1-3. 

Lastly, a storage device 524, such as a database as described above for 
example, preferably contains files or records which are accessed by the various 
software modules 512. 514, 516, and 518. In particular, manufacturer data 526 
comprises information received from a manufacturer, such as descriptions or other 

15 information regarding the manufacturer's products and/or services as well as UPC data 
for example. Retailer data 528 comprises information received from a retailer, such as 
descriptions or other information regarding the retailer's products and/or services as well 
as SKU data for example. Consumer data 530 comprises information pertaining to a 
consumer, including a consumer ID, purchase data, a consumer profile, and/or the like. 

20 One skilled in the art will appreciate that the storage device 524 and, therefore, 
manufacturer data 526, retailer data 528, and consumer data 530 may be co-located 
with the rewards server 502 or may be remotely located with respect to the rewards 
server 502. If the storage device 524 is remotely located with respect to the rewards 
sen/er 502, communication between storage device 524 and rewards server 502 may 

25 be accomplished by any suitable communication link but is preferably accomplished 
through a private intranet or extranet. 

Referring next to FIGS. 6 and 7, the process flows depicted in these figures are 
merely exemplary embodiments of the invention and are not intended to limit the scope 
of the invention as described above. It will be appreciated that the following description 
30 makes appropriate reference not only to the steps depicted in FIGS. 6 and 7 but also to 
the various system components as described above with reference to FIGS. 1-3. 

FIG. 6 is flowchart illustrating an exemplary process for capturing and processing 
POS SKU data in accordance with the present invention. The association or matching 
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of UPC and SKU data begins with POS data capture (step 602). When a consumer 
presents a consumer ID to a retailer 104 at the time of purchasing an item from the 
retailer 104, the consumer ID is processed by a rewards terminal 116 that recognizes 
the consumer ID and identifies the consumer as a participant in the system 100. 
5 Purchase data is captured by the retailer POS terminal 112. Purchase data may include 
any of the following: a SKU number; a unit price; a total transaction price; the payment 
vehicle(s) used; a store ID which identifies the particular store location if a retailer 
operates more than one store; a department ID, if the store has multiple departments; 
the date of the transaction; the time of the transaction; the employee ID of the store 

10 clerk who facilitates the transaction; a POS terminal ID to identify the particular terminal 
conducting the transaction; any retailer-specific incentive program ID; and/or the like. 
The retailer POS terminal 112 creates a transaction file comprising the consumer data 
(including a consumer ID) and purchase data (including a SKU number associated with 
each item purchased), and the transaction file is then stored by the retailer processor 

15 1 1 0 in database 1 1 1 (step 604). 

The various transaction files may be consolidated by the retailer processor 110 
and then forwarded to the retailer regional processor 114 (step 606) for further back- 
office and cumulative data analysis performed by retailer 104. 

In an exemplary embodiment, the transaction file is transmitted by either of the 
20 retailer processor 110 or the retailer regional processor 114 to the rewards server 120 
(step 608). The SKU information for each item included in the transaction file is then 
matched to or associated with corresponding UPC information which identifies the 
related manufacturer 106. An exemplary association process is illustrated in the 
flowchart of FIG. 7. Association of SKU and UPC data may be accomplished through 
25 any data association technique known and practiced in the art. For example, the 
association may be accomplished either manually or automatically. Automatic 
association techniques may include, for example, a database search, a database 
merge, GREP, AGREP, SQL, and/or the like. 

In an exemplary embodiment, database 121 receives and stores manufacturer 
30 data, including UPC data, from manufacturer 106 (step 702). Database 121 also 
receives and stores retailer data, including SKU numbers, from retailer 104 (step 704). 
In an exemplary implementation, database 121 stores manufacturer data in a separate 
manufacturer data table for each participating manufacturer 106. Each manufacturer 
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data table may comprise a plurality of fields, such as "UPC and "product description" for 
example, and a plurality of records, eacli of which corresponds to an item offered by the 
participating manufacturer 106. In one embodiment, database 121 stores retailer data 
in a separate retailer data table for each participating retailer 104. Each retailer data 
table may comprise a plurality of fields, such as "SKU" and "product description" for 
example, and a plurality of records, each record corresponding to an item offered by a 
participating retailer 104. 

Data from each of the manufacturer and the retailer data tables is then 
associated (step 706). The association step may be accomplished by a database 
merge function, for example, using a "key field" in each of the manufacturer and retailer 
data tables. A "key field" partitions the database according to the high-level class of 
objects defined by the key field. For example, a "product description" class may be 
designated as a key field in both the manufacturer data table and the retailer data table, 
and the two data tables may then be merged on the basis of the "product description" 
data in the key field, in this embodiment, the data corresponding to the key field in each 
of the merged data tables is preferably the same. That Is, the product descriptions in 
the manufacturer data table matches the product descriptions in the retailer data table. 
However, manufacturer and retailer data tables having similar, though not identical, data 
in the key fields may also be merged by using AGREP, for example. 

The result of the data association step is the creation of a separate data table, 
such as a UPC/SKU lookup table for example (step 708). Thus, when the rewards 
server 120 receives the data (e.g., consumer ID and SKU data) captured by the POS 
terminal (step 710), the rewards server 120 may search the UPC/SKU lookup table for 
the appropriate SKU number and then match the SKU to the corresponding UPC data 
(step 712). In an exemplary embodiment, the "SKU" and "UPC" fields in the UPC/SKU 
data table may be linked by an appropriate pointer. That is, when the rewards server 
120 searches the UPC/SKU table and locates the particular SKU that has been 
captured and transmitted by the POS terminal, the specifically identified SKU datafield 
uses a pointer to direct the rewards server 120 to the UPC datafield that corresponds to 
that SKU number. In an exemplary embodiment, the UPC datafield may be linked by 
one or more additional pointers to other key fields, such as a consumer ID, a retailer ID, 
a manufacturer ID, and/or a third-party ID. These additional pointers may be used as 
means for compiling data which may be useful in any of the various data analyses 
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performed by the rewards server 120. In this manner, the association of POS SKU 
numbers and UPC data may be used to create a context in which standardized, 
networl<-wide analyses may be conducted. 

In an exemplary embodiment, the rewards server 120 utilizes the association 

5 information to calculate the rewards points generated by a consumer's purchase. For 
example, an appropriate series of pointers leading from a SKU to a UPC to a 
manufacturer ID may ultimately direct the rewards server 120 to employ a 2-for-1 
manufacturer rewards ratio to award a consumer twice as many points as the dollar 
amount of the consumer's total transaction price. In another exemplary embodiment, an 

10 appropriate series of pointers may result in the calculation of rewards points based upon 
multiple rewards criteria, such as rewards criteria associated with the manufacturer of 
the item as well as rewards criteria associated with a third-party provider for example. 

In a further embodiment, the rewards server 120 may use the association of UPC 
and SKU number data to analyze a variety of marketing variables across multiple 
5 15 manufacturers and retailers. For example, rewards server 120 may use a series of 
* pointers leading from an SKU to a UPC and then to a "consumer profile" field or table to 

M correlate, for instance, consumer spending behaviors, particular manufacturers, and/or 

specific products across multiple retailers for example. 

In alternative embodiments, association of the UPC data and SKU number may 
fif 20 take place at any of the rewards terminal 116, the retailer POS terminal 112, the retailer 
processor 110, the retailer regional processor 114 (or a retailer national processor), 
and/or the central rewards mechanism 102. 

In one embodiment, the retailer 104 may offer an incentive or loyalty program that 
is independent from the program offered by the system 100. Alternatively, the retailer 
25 1 04 may use the system's UPC data for its own internal purposes. 

With momentary reference to FIG. 6, in one exemplary embodiment, the 
consumer ID and the earned rewards information are transmitted to the central rewards 
mechanism 102 after the rewards server 120 has filtered out consumer data associated 
with the consumer ID (step 610). In another embodiment, the central rewards 
30 mechanism 102 may use the captured and matched UPC information to determine 
rewards and/or for data analysis. 
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Consumers may utilize computing devices to assist in tine purchase and/or loyalty 
process, and in particular, the consumer may utilize a PDA to facilitate the purchase 
and/or loyalty process. During the purchase and/or loyalty process, the consumer may 
need to insure that any content downloaded or used in association with the PDA is 
secure in how it is collected, assembled and delivered to the PDA device. In an 
exemplary embodiment, the PDA may have direct access to an Internet web site portal 
that offers secure personal content from a content provider, such as, for example, an 
on-line banking or financial institution. Using the web site portal, the content provider 
may offer personal or confidential data, such as financial information, to PDA users in a 
secure (e.g., encrypted) environment. The exemplary system and method may 
establish a PDA portal link to the web site for collecting specified information for a user 
and transmitting the information to the remote device. To receive information, the PDA 
contacts the portal and establishes a connection, authenticates itself to the network and 
allows the user to complete secured transactions or transmissions over the network. 

As more fully described in Figures 1-6, in an exemplary embodiment, when a 
user indicates the selected content should be refreshed (synching their PDA device), the 
device will connect to the PDA portal. The PDA portal identifies the user and 
interrogates the channels they have selected. If one (or more) of the channels includes 
secure content, the PDA portal connects to the source channel and collects the desired 
content. However, instead of connecting directly to the source, the portal connects to a 
hardware encryption device (HED) with the request. The HED connects to the channel 
source using a secure connection where the encryption key is negotiated between the 
two parties. The channel source content is prepared and returned to the HED in an 
encrypted form. The HED decrypts the content, but before forwarding the content to the 
portal for further processing, the HED interrogates the content. As it interrogates the 
content, any imbedded links will be isolated. The resulting content will then be re- 
encrypted using some standardized algorithm (such as ECC) using the encryption key 
(pass-phrase) that has been established by the user. The encrypted content as well as 
the "in the clear" links will then be returned to the portal for continued processing. 

The content will then be forwarded to the PDA for storing either piecemeal as the 
collection of each channel is completed, or as a whole once all the content has been 
collected. The content is then sent to the PDA in the same form it has been received by 
the portal from the channel (for non-secure content) or the HED (secure content). When 
the user desires to view the secure content, the PDA requests that the user 
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authenticates himself by entering his pass-phrase, which will be used to decrypt the 
content. The authentication may exist each time the user tries to access this content, as 
the content will continue to be stored in an encrypted state on the device. 

This approach secures the content from its source channel all the way to the 
5 device. The exposure or visibility of the personal content in an unsecured state is 
eliminated or minimized. The term end to end is often used to describe that content is 
secure from its source to when it is used. This concept needs to be expanded for PDAs 
because much of the time they are used in a disconnected fashion. Being 
disconnected, the content is physically stored on the device and can be accessed 
10 multiple times. So once the connection to the network has been broken, the content 
should continue to be secured against improper use. Therefore, this solution also 
includes that the content be secured while on the PDA and be viewable only after the 
user has properly authenticated themselves. However, one skilled in the art will 
^ appreciate that the invention may be configured such that the content, or any portion 

a 15 thereof, may be secured at any point or segment along the transmission or storage or all 

points along the process. 
H In an exemplary embodiment, the system and method utilizes a hardware 

J encryption device as a filter as the content is streamed into the PDA portal. In one 

embodiment, the content will be decrypted from the standard Internet interaction, and re- 
m 20 encrypted using a standard algorithm. This re-encryption may be applied to only the 
W content, not any links that are included. This allows the link to be visible to the portal 

Q function to request the additional content pages. 

^ Providing content security between multiple layers of a system usually consists of 

each pair of communicating components negotiating the method they will use for 

25 securing any interchange between them. Each step could use a different method for 
encrypting the content, producing a secure environment. However, since the content 
being collected will be stored on the PDA device, there is little need to negotiate the 
method for securing the data. Instead the data will be secured using a standard 
algorithm using a key established by the user. This key (or pass-phrase) will then serve 

30 as the means for authenticating the user, and must be supplied by the user when they 
want to view the content on the PDA. Another reason a standard algorithm may be 
used for encrypting the content to be placed onto the PDA is to minimize the resources 
needed to decrypt the content on the PDA. The standard protocols used by the internet 
are not trivial in the resources that are needed to decrypt content. 
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This system and method secures the data from its source to when it is actually 
viewed/used by the authorized user. It will use methods for securing the content that 
are appropriate for the environment being used. For example, to collect the content 
from the source channels, standard internet methods (SSL) may be used. However, 
since the PDAs are limited in their different capabilities, a different method, requiring 
less resources, of securing the data on the device is needed (such as ECC). 

Since the PDA portal serves as a collection point, it is equally important to insure 
the content is secured as it is being collected and aggregated with content from other 
channel sources. This invention may secure the content itself while exposing any links 
for additional data collection. In this way, the exposure of secure data is minimized 
outside the source, the hardware encryption device, or when viewed by the 
authenticated user. 

Once this content and the mechanism to push it onto the device are available, all 
types of personal content can be placed onto the customers PDA for their offline use. 
This could include their travel itineraries, monthly account statements, and even their 
investment portfolio. As such, this solution will enable personal content to be securely 
distributed to the customers PDA's, thereby placing content onto a device that can be 
connected or disconnected in how it is used will increase the value of the content that 
content providers make available. 

in the foregoing specification, the invention has been described with reference to 
specific embodiments. However, it will be appreciated that various modifications and 
changes can be made without departing from the scope of the present invention as set 
forth in the claims below. The specification and figures are to be regarded in an 
illustrative manner, rather than a restrictive one, and all such modifications are intended 
to be included within the scope of present invention. Accordingly, the scope of the 
invention should be determined by the appended claims and their legal equivalents, 
rather than by the examples given above. For example, the steps recited in any of the 
method or process claims may be executed in any order and are not limited to the order 
presented in the claims. 

Benefits, other advantages, and solutions to problems have been described 
above with regard to specific embodiments. However, the benefits, advantages, 
solutions to problems, and any element(s) that may cause any benefit, advantage, or 
solution to occur or become more pronounced are not to be construed as critical, 
required, or essential features or elements of any or all the claims. As used herein, the 
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terms "comprises", "comprising", or any other variation tliereof, are intended to cover a 
non-exclusive inclusion, such that a process, method, article, or apparatus that 
comprises a list of elements does not include only those elements but may include other 
elements not expressly listed or inherent to such process, method, article, or apparatus. 
Further, no element described herein is required for the practice of the invention unless 
expressly described as "essential" or " critical". 
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